In the vast and complex world of cybersecurity, danger often hides in the most unsuspecting corners, stalking stealthily where our guard is least prepared. While the threats, like timeless adversaries, …
Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach
September 5, 2023 0 Comments In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more …
AttackCrypt: A Payload Encryptor That Allows Malware to Evade Antivirus Scanners
AttackCrypt, an open-source “crypter,” was recently used by cybercriminals to hide malware binaries and avoid antivirus detection. A crypter is a kind of software that can encrypt, obfuscate, and alter malicious code to make …
What is Zero Trust Data Access? – Zero Trust in the SaaS Guide
Zero Trust Data Access (ZTDA) constitutes a fundamental aspect of the wider Zero Trust security framework, which entails limiting data access. The Zero Trust security approach follows the principle of …
shelLM – A New AI-Based Honeypot to Engage Attackers as a Real System
A honeypot is a trap on a network that lures and studies cyber-attack techniques of threat actors, alerting defenders to unauthorized access attempts. Though Honeypots help and assist cybersecurity researchers …
Freecycle Urges Users to Change Passwords Following Data Breach
Freecycle, a popular online platform for giving away and receiving free items, reported a significant data breach. The Freecycle Network (TFN) is a nonprofit organization registered in Arizona, USA, and …
Hackers Exploit Pre-Authentication RCE Vulnerabilities in Adobe ColdFusion
Adobe ColdFusion is a Java-based, commercial web app development platform using CFML for server-side programming. ColdFusion is primarily known for its tag-based approach, which is unique. Besides this, it is …
Beware of New Fileless Malware that Propagates Through Spam Mail
Recent reports suggest threat actors have used phishing emails to distribute fileless malware. The attachment consists of a .hta (HTML Application) file, which can be used for deploying other malware …
Hackers Attacking MSSQL Servers To Deploy Ransomware
Recently, threat actors have been utilizing brute force attacks to compromise exposed MSSQL databases to distribute the FreeWorld ransomware. This attack campaign, dubbed DB#JAMMER, is notable, according to Securonix Threat Labs, …
Sophisticated Earth Estries Group Hack Government Agencies and Tech Companies
A new sophisticated cyber espionage group named Earth Estries, which overlaps notorious threat group FamousSparrow, was unveiled. The group has been active since 2020 and targets multiple government and technology …